- Running CL commands should be qualified by the library (runsqlstm, clrpfm, cpyf) - Objects created on the IBM i should have authority *PUBLIC *USE - Version checking of objects on the IBM i should incorporate a hash function - UDTF should not use adopted authority. e.g. use EXEC SQL SET OPTION USRPRF=*USER, DYNUSRPRF=*USER